General
- Target e6c966269c6497ee4fdae432d4db78a274635bf37a39e9876c4daf3d4d88c97c
- Size 1.6MB
- Sample260820-jtvvrssdpd
- SHA256 e6c966269c6497ee4fdae432d4db78a274635bf37a39e9876c4daf3d4d88c97c
- MD5 2501122ccbbb14a1bb9396eab24c3c6d
- SHA1 ec846219f0a26700b32d7a3895971e37b88b8163
- SHA512 a106c3c782b26e8fa667c5707c417596d18d792c10f99a083e16c22292576c6639bd790651a1aecfd53424d410e7c1019fd36099e8b5a55ff6f8e190fde58c6c
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfE:AylFHUv6ReIt0jSrOA88gE
- TLSH T1E8758C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e6c966269c6497ee4fdae432d4db78a274635bf37a39e9876c4daf3d4d88c97c.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
e6c966269c6497ee4fdae432d4db78a274635bf37a39e9876c4daf3d4d88c97c.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target e6c966269c6497ee4fdae432d4db78a274635bf37a39e9876c4daf3d4d88c97c
- Size 1.6MB
- SHA256 e6c966269c6497ee4fdae432d4db78a274635bf37a39e9876c4daf3d4d88c97c
- MD5 2501122ccbbb14a1bb9396eab24c3c6d
- SHA1 ec846219f0a26700b32d7a3895971e37b88b8163
- SHA512 a106c3c782b26e8fa667c5707c417596d18d792c10f99a083e16c22292576c6639bd790651a1aecfd53424d410e7c1019fd36099e8b5a55ff6f8e190fde58c6c
- SSDEEP 24576:NqylFH50Dv6RwyeQvt6ot0h9HyrOgiruAMnnAhUQfnAhUQfnAhUQfE:AylFHUv6ReIt0jSrOA88gE
- TLSH T1E8758C16769D81E0D05A1070696B7336E931B9253722CAEB73E2CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE